Sign-up

ID

VAR-202506-0608


CVE

CVE-2025-5478


TITLE

Sony Corporation's  XAV-AX8500  Integer overflow vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2025-008304

DESCRIPTION

Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the Bluetooth SDP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26288. Sony Corporation's XAV-AX8500 An integer overflow vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. SONY XAV-AX8500 is a car AV receiver with enhanced functions. SONY XAV-AX8500 has an input validation error vulnerability

Trust: 2.79

sources: NVD: CVE-2025-5478 // JVNDB: JVNDB-2025-008304 // ZDI: ZDI-25-355 // CNVD: CNVD-2025-14803

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-14803

AFFECTED PRODUCTS

vendor:sonymodel:xav-ax8500scope: - version: -

Trust: 1.3

vendor:sonymodel:xav-ax8500scope:ltversion:3.02.00

Trust: 1.0

vendor:sonymodel:xav-ax8500scope:gteversion:2.00.01

Trust: 1.0

vendor:ソニー株式会社model:xav-ax8500scope:eqversion:xav-ax8500 firmware 2.00.01 that's all 3.02.00

Trust: 0.8

vendor:ソニー株式会社model:xav-ax8500scope:eqversion: -

Trust: 0.8

vendor:ソニー株式会社model:xav-ax8500scope: - version: -

Trust: 0.8

sources: ZDI: ZDI-25-355 // CNVD: CNVD-2025-14803 // JVNDB: JVNDB-2025-008304 // NVD: CVE-2025-5478

CVSS

SEVERITY

CVSSV2

CVSSV3

zdi-disclosures@trendmicro.com: CVE-2025-5478
value: HIGH

Trust: 1.0

OTHER: JVNDB-2025-008304
value: HIGH

Trust: 0.8

ZDI: CVE-2025-5478
value: HIGH

Trust: 0.7

CNVD: CNVD-2025-14803
value: HIGH

Trust: 0.6

CNVD: CNVD-2025-14803
severity: HIGH
baseScore: 8.3
vectorString: AV:A/AC:L/AU:N/C:C/I:C/A:C
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 6.5
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

zdi-disclosures@trendmicro.com: CVE-2025-5478
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.0

OTHER: JVNDB-2025-008304
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

ZDI: CVE-2025-5478
baseSeverity: HIGH
baseScore: 8.8
vectorString: AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 0.7

sources: ZDI: ZDI-25-355 // CNVD: CNVD-2025-14803 // JVNDB: JVNDB-2025-008304 // NVD: CVE-2025-5478

PROBLEMTYPE DATA

problemtype:CWE-190

Trust: 1.0

problemtype:Integer overflow or wraparound (CWE-190) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2025-008304 // NVD: CVE-2025-5478

PATCH

title:Sony has issued an update to correct this vulnerability.url:https://www.sony.com/electronics/support/mobile-cd-players-digital-media-players-xav-series/xav-ax8500/software/00344092

Trust: 0.7

title:Patch for SONY XAV-AX8500 Input Validation Error Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/703801

Trust: 0.6

sources: ZDI: ZDI-25-355 // CNVD: CNVD-2025-14803

EXTERNAL IDS

db:NVDid:CVE-2025-5478

Trust: 3.9

db:ZDIid:ZDI-25-355

Trust: 3.1

db:JVNDBid:JVNDB-2025-008304

Trust: 0.8

db:ZDI_CANid:ZDI-CAN-26288

Trust: 0.7

db:CNVDid:CNVD-2025-14803

Trust: 0.6

sources: ZDI: ZDI-25-355 // CNVD: CNVD-2025-14803 // JVNDB: JVNDB-2025-008304 // NVD: CVE-2025-5478

REFERENCES

url:https://www.sony.com/electronics/support/mobile-cd-players-digital-media-players-xav-series/xav-ax8500/software/00344092

Trust: 2.5

url:https://www.zerodayinitiative.com/advisories/zdi-25-355/

Trust: 2.4

url:https://nvd.nist.gov/vuln/detail/cve-2025-5478

Trust: 0.8

sources: ZDI: ZDI-25-355 // CNVD: CNVD-2025-14803 // JVNDB: JVNDB-2025-008304 // NVD: CVE-2025-5478

CREDITS

Synacktiv

Trust: 0.7

sources: ZDI: ZDI-25-355

SOURCES

db:ZDIid:ZDI-25-355
db:CNVDid:CNVD-2025-14803
db:JVNDBid:JVNDB-2025-008304
db:NVDid:CVE-2025-5478

LAST UPDATE DATE

2025-07-12T23:23:24.337000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-25-355date:2025-06-11T00:00:00
db:CNVDid:CNVD-2025-14803date:2025-07-02T00:00:00
db:JVNDBid:JVNDB-2025-008304date:2025-07-09T08:33:00
db:NVDid:CVE-2025-5478date:2025-07-08T14:29:23.690

SOURCES RELEASE DATE

db:ZDIid:ZDI-25-355date:2025-06-11T00:00:00
db:CNVDid:CNVD-2025-14803date:2025-07-01T00:00:00
db:JVNDBid:JVNDB-2025-008304date:2025-07-09T00:00:00
db:NVDid:CVE-2025-5478date:2025-06-21T01:15:28.457